CVE-2026-7608

A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is the function tools_diagnostic. The manipulation results in os command injection. The exploit is now public and may be used. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-77
• CWE-78

• https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Trendnet/TEW-821DAP_CI1.mdExploit, Third Party Advisory
• https://vuldb.com/submit/806215Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/360565Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/360565/ctiPermissions Required, VDB Entry

Published

May 2, 2026

Last Modified

Oct 26, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-76072The Continue CLI applies an incomplete denylist as its only …7.4
• CVE-2026-76073Label Studio does not scope the annotation detail endpoint t…8.8
• CVE-2026-76074The AutomatorWP – Automator plugin for no-code automations, …4.3
• CVE-2026-76077ASN1SCC is an open source ASN.1 compiler for embedded system…8.1
• CVE-2026-76078Probo is a self-hostable governance, risk, and compliance (G…3.1
• CVE-2026-76079Probo is a self-hostable governance, risk, and compliance (G…7.2
• CVE-2026-76080Probo is a self-hostable governance, risk, and compliance (G…3.7
• CVE-2026-76081ZITADEL is an open source identity management platform. Prio…5.5
• CVE-2026-76083Redash is a package for data visualization and sharing. From…4.9
• CVE-2026-76086Formie is a Craft CMS plugin for creating forms. Prior to 2.…8.5
• CVE-2026-76087Formie is a Craft CMS plugin for creating forms. Prior to 2.…8.2
• CVE-2026-76089Formie is a Craft CMS plugin for creating forms. Prior to 2.…7.7